- Fixed start up failure when mm save handler is used and there is multiple
SAPIs are working at the same time. (Yasuo)
- Fixed a buffer overflow in the RFC-1867 file upload code (Stefan)
<===> SECURITY NOTE <===>
Note that the buffer overflow fix is a major security fix. Quoting from
the security advisory at:
http://security.e-matters.de/advisories/012002.html
"PHP supports multipart/form-data POST requests (as described in RFC1867)
known as POST fileuploads. Unfourtunately there are several flaws in the
php_mime_split function that could be used by an attacker to execute
arbitrary code. During our research we found out that not only PHP4 but
also older versions from the PHP3 tree are vulnerable.
[...]
"If you are running PHP 4.0.3 or above one way to workaround these bugs is
to disable the fileupload support within your php.ini (file_uploads = Off).
If you are running php as module keep in mind to restart the webserver.
Anyway you should better install the fixed or a properly patched version to
be safe."
Relevant changes from version 2.8.6 include:
*) Fixed potential buffer overflow in DBM and SHMHT session
cache if very very large certificate chains are used.
*) Compliance with POSIX 1003.1-2001 (SUSv3) by replacing obsolete
"head -1" and "tail -1" constructs with sed variants in scripts.
the EAPI patches from modssl-2.8.7-1.3.23. Also, link against the MM
Shared Memory library (devel/libmm) to provide shared memory support in
Apache/EAPI. For example, this allows mod_ssl to use a high-performance
RAM-based session cache instead of a disk-based one.
Mew 2.2 (2002/02/25)
Mew 2.2rc4 (2002/02/21)
* Defining mew-syntax-treat-filename-default-function.
* Binding auto-image-file-mode to nil in mew-flet and mew-frwlet.
* Defining mew-use-other-frame.
* Yet another bug fix for "t*".
* A bug fix for mew-summary-join.
* Seeing if incm exists or not.
Mew 2.2rc3 (2002/02/04)
* Fixing the "foo: ;" problem.
* m17n hack for Summary mode of +draft.
* Window-config hack for composing mails.
* A bug fix for "t*".
* Prefix for mew-draft-insert-signature.
* Patches for incm.
* A bug fix of mew-summary-save for the NAME parameter.
* Creating folders specified by Fcc: when composing.
* Debug hack.
* sleep-for 1 for mew-touch-folder-check.
* LANG: "en" -> "C"
* A bug fix for mew-buffer-message.
* Defining mew-encode-singlepart-hook.
* Null body hack for incm.
* A bug fix for mew-insert-message.
Mew 2.2rc2 (2002/01/17)
* Workaround for messages whose size is 0.
* TIS 620 hack.
* GCC hack for configure.in.
* A patch for configure.in.
* Displaying the number of marked messages.
* make clean hack.
* Digit-argument for "0"-"9". mew-summary-toggle-8bit -> "z8".
* Supporting ".tif".
* "nntp" service entry.
* incm hack.
* A patch for incm.
* incm is merged.
* A bug fix for mew-delete-file.
* no-fold option for mew-header-insert.
* Case-sensitive search for marks.
Mew 2.2rc1 (2001/12/20)
* A bug fix of C-cC-z for multple PGP data.
* A bug fix for w3m.
Mew 2.1.52 (2001/12/11)
* Sort key hack: "ml2" -> "mlnum"
* Copying minibuffer-local-map to mew-input-map.
* A bug fix for mew-input-file-name.
* wvHtml hack.
* Defining mew-broken-parameter-list.
* m17n hack.
* Defining mew-prog-audio{,2} for Win32.
XFrisk is a computer version of the classic Risk board game. It is a
multiplayer game played on a TCP/IP network, uses the X11 window system
for graphics and runs on most UNIX and UNIX-like platforms.
Provided in PR 15725 by Jonathon Perkin (sketch@rd.bbc.co.uk), modified
slightly by myself.
* Don't declare a bunch of extern functions that are already declared by
system headers on NetBSD.
XXX This change may be incorrect for non-current systems.
- Updated French, and added Finnish translations.
- Added on demand load of song information for the playlist window.
- Searches further into mp3 files with ID3v2 tags for header info.
- Added ID3 blank genre option.
* Fixed file descriptor leak in mpg123 fork pipe.
* ogg song information tags are now case insensitive.
* Fixed possible buffer overruns with sprintf, strcpy, etc.
* More bug fixes.
Text::Substitute substitutes the contents of a hash into a file or text string.
It includes a limited set of conditionals, looping, and the ability
to include other files. It was designed primarily for generating
web content.
